Microsoft Teams used to deliver DarkGate Loader malware

Researchers have found a new method by which cybercriminals are spreading the DarkGate Loader malware. Until now, DarkGate was typically distributed via phishing emails. The malspam campaign used stolen email threads to lure victims into clicking a hyperlink, which downloaded the malware. But...

Microsoft Teams Pluginhost Prototype Pollution Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Microsoft Teams. An attacker must first obtain the ability to execute script within the application window in order to exploit this vulnerability. The specific flaw exists within the Pluginhost window...

Microsoft Teams "Give/Request Control" option not available from the VDI in Screen Share

Microsoft Teams "Give/Request Control" option is not available from the VDI while having Screen Share...

Chimera - Automated DLL Sideloading Tool With EDR Evasion Capabilities

While DLL sideloading can be used for legitimate purposes, such as loading necessary libraries for a program to function, it can also be used for malicious purposes. Attackers can use DLL sideloading to execute arbitrary code on a target system, often by exploiting vulnerabilities in legitimate...

Microsoft Teams < 1.6.0.18681 RCE

The version of Microsoft Teams installed on the remote Windows host is version prior to 1.6.0.18681. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands. Note that Nessus...

Six critical vulnerabilities included in August’s Microsoft security update

Microsoft disclosed 73 vulnerabilities across its suite of products and software Tuesday, including six that are considered "critical." One of the vulnerabilities, which Microsoft considers to be only of "moderate" severity, has been actively exploited in the wild. The company has had to address...

CVE-2023-29330

Microsoft Teams Remote Code Execution Vulnerability...

CVE-2023-29328

Microsoft Teams Remote Code Execution Vulnerability...

CVE-2023-29328

Microsoft Teams Remote Code Execution Vulnerability...

CVE-2023-29330

Microsoft Teams Remote Code Execution Vulnerability...

Remote code execution

Microsoft Teams Remote Code Execution Vulnerability...

Remote code execution

Microsoft Teams Remote Code Execution Vulnerability...

CVE-2023-29330 Microsoft Teams Remote Code Execution Vulnerability

...

CVE-2023-29330 Microsoft Teams Remote Code Execution Vulnerability

...

CVE-2023-29328 Microsoft Teams Remote Code Execution Vulnerability

...

CVE-2023-29328

Technical details about CVE-2023-29328 are not publicly provided in the supplied documents. Available sources reference a Microsoft Teams RCE but do not specify affected versions, root cause, exploitability, or fixes. Monitor for updates and vendor advisories.

August 8, 2023—KB5029250 (OS Build 20348.1906)

None None...

Microsoft Teams Security Vulnerability

Microsoft Teams is a software from Microsoft USA for online meetings, chat, and cloud storage capabilities. A security vulnerability exists in Microsoft Teams. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected: Microsoft Teams...

PT-2023-4968 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Teams, allowing a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no informati...

A week in security (July 31 - August 6)

Last week on Malwarebytes Labs: The end looms for Meta's behavioural advertising in Europe Microsoft Teams used in phishing campaign to bypass multi-factor authentication Film companies lose battle to unmask Reddit users FAQ: How does Malwarebytes ransomware rollback work? How to protect your...